On a related note, it'd be interesting to see how these attacks work on curves over binary fields, e.g. ecb233. These are available in OpenSSL, and the operati

On a related note, it'd be interesting to see how these attacks work on curves over binary fields, e.g. ecb233. These are available in OpenSSL, and the operations of addition and doubling have the same computational cost [1], so these attacks should be harder. [1] when using affine coordinates, but that's the only thing implemented in openssl for curves over binary fields to the best of my knowledge